Determine whether your compute is truly vulnerable to a specific vulnerability by accounting for all factors which affect *actual* exploitability (runtime execution, configuration, permissions, exi...

The threat intelligence team of Cleafy analyzed the Android Malware Vultur and its journey from Google Play to banking fraud. Read here the technical analysis.

AWS Organizations is a common service to run into in AWS environments. It's default behavior can make it a target for attackers.

Keeping up with security research is near impossible. ThinkstScapes helps with this. We scour through thousands of blog posts, tweets and conference proceedings to give you an overview of the work we think significantly moves the needle.

Programmable debugger. Contribute to osandov/drgn development by creating an account on GitHub.

Phylum uncovers a new campaign targeting Python developers. Malware authors surreptitiously replace cryptocurrency addresses in developer clipboards.

Maturity models help integrate traditionally separate organizational functions, set process improvement goals and priorities, provide guidance for quality processes, and provide benchmark for appra...

Substation is a toolkit for routing, normalizing, and enriching security event and audit logs. - brexhq/substation

Posted by u/carrotcypher - 372 votes and 241 comments

For decades, software vulnerabilities have remained an unsolvable security problem regardless of years of investment in various mitigations, hardening and fuzzing strategies. In the last years there have been moves to formal methods as a path toward better…

Shennina Framework - Automating Host Exploitation with AI.

Sigstore announced the general availability of its free and ecosystem-agnostic software signing service two weeks ago, giving developers a way to sign, verify and protect their software projects and the dependencies they rely on. Trail of Bits is absolutely…

This commercial malware is used to download and deploy additional malware and ransomware on infected machines. We analyzed the latest version

Quick look at a new stealer utilizing polyglot files

Dig deeper into the techniques used by attackers and the mitigations you should implement when ransomware on Azure affects you.

SpyGuard is a forked and enhanced version of TinyCheck. SpyGuard's main objective is to detect signs of compromise by monitoring network flows transmitted by a device. - SpyGuard/SpyGuard